Trading Assistant Publish

Technical analysis toolkit with indicators and trading signals

Security Scan

The skill is an instruction-only, educational trading indicator toolkit with no declared installs, credentials, or code to execute — its files are sparse but internally coherent aside from minor metadata/version inconsistencies.

Purpose & Capability

Name and description (technical analysis / trading signals for education) align with the contents: SKILL.md and README contain only descriptive text and an install command. There are no extra binaries, env vars, or unrelated requirements requested.

Instruction Scope

SKILL.md contains only metadata and an instruction to run 'clawhub install trading-assistant'. It does not instruct the agent to read files, environment variables, or transmit data to unexpected endpoints. There is no scope-creep in the runtime instructions.

Install Mechanism

There is no install spec bundled with the skill (instruction-only), which is low-risk. However, the install step references 'clawhub install' — you should verify what clawhub does and which registry/source it downloads from before running it. Also note inconsistent version numbers across files (openclaw.plugin.json/package.json/SKILL.md vs registry) which is a sign of sloppy packaging but not direct maliciousness.

Credentials

The skill declares no required environment variables, no credentials, and no config paths — this is proportionate for an educational trading toolkit that contains only documentation/instructions.

Persistence & Privilege

Flags indicate default behavior (always: false, agent-invocable allowed). The skill does not request persistent presence or system-wide configuration changes.

Assessment

This skill is minimal and appears coherent with its stated purpose, but it comes from an unknown source and contains inconsistent version metadata. Before installing: (1) confirm what 'clawhub install' will download and from which registry or URL; (2) prefer installing only from trusted registries or authors; (3) consider inspecting the downloaded package contents in a sandbox before granting it network or credential access; (4) if you need production trading automation, require a more complete skill that documents exact behavior and dependencies. The current package is low-risk for installation as documentation only, but verify the clawhub install source first.

Trading Assistant

Technical analysis toolkit with indicators and trading signals for educational purposes.

Installation

clawhub install trading-assistant

License

MIT